REDHAT-BUG-1823960: Medium severity sun jsse vulnerability
A flaw was found in the way the TLS implementation in the JSSE component of OpenJDK re-used single null TLS sessions for new TLS connections. A remote attacker could possibly use this flaw to impact availability of a Java application providing TLS server.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1823960?
The severity of REDHAT-BUG-1823960 is considered moderate due to its potential impact on the availability of Java applications using TLS.
How do I fix REDHAT-BUG-1823960?
To fix REDHAT-BUG-1823960, you should update to the latest version of OpenJDK that addresses this TLS implementation flaw.
What versions of OpenJDK are affected by REDHAT-BUG-1823960?
REDHAT-BUG-1823960 affects certain versions of the JSSE component in OpenJDK implementations.
Can REDHAT-BUG-1823960 lead to a denial of service attack?
Yes, REDHAT-BUG-1823960 can allow a remote attacker to impact the availability of a Java application providing TLS services.
Is there a workaround for REDHAT-BUG-1823960?
Currently, the recommended approach for REDHAT-BUG-1823960 is to apply the applicable security updates rather than relying on workarounds.